Configuration

All configuration lives in wwwroot/appsettings.json (+ appsettings.Development.json).

{
  "IdentityApi": { "BaseUrl": "https://localhost:5001", "TimeoutSeconds": 30, "MaxRetries": 3 },
  "Authentication": { "Authority": "...", "ClientId": "...", "RedirectUri": "...", "Scopes": "..." },
  "FeatureFlags": {
    "EnableUserManagement": true,
    "EnableRoleManagement": true,
    "EnableClaimsManagement": true
  }
}

Notes

• DI is wired directly in Program.cs (there is no ServiceCollectionExtensions).
• The "IdentityApi" HttpClient (with AuthorizationMessageHandler) is registered, but the user/role/claim services currently resolve to in-memory stubs. Set IdentityApi.BaseUrl and replace the stubs to call a real backend.
• FeatureFlags toggle the user/role/claim areas.

See also

• Features
• Runbook